listen_addresses = ['127.0.0.1:53', '192.168.0.42:53']
max_clients = 250
ipv4_servers = true
ipv6_servers = false
dnscrypt_servers = true
doh_servers = true
require_dnssec = true
require_nolog = true
require_nofilter = true
disabled_server_names = []
force_tcp = false
timeout = 5000
keepalive = 30

log_level = 2
log_file = '/var/log/dnscrypt-proxy/dnscrypt-proxy_local.log'
log_files_max_size = 10
log_files_max_age = 7
log_file_latest = true
log_files_max_backups = 1
use_syslog = false
cert_refresh_delay = 240
bootstrap_resolvers = ['94.16.114.254:53']
ignore_system_dns = true
netprobe_timeout = 60
netprobe_address = '94.16.114.254:53'

block_ipv6 = false
block_unqualified = true
block_undelegated = true
reject_ttl = 600

cloaking_rules = '/etc/dnscrypt-proxy/cloaking-rules_local.txt'

cache = true
cache_size = 8192
cache_min_ttl = 2400
cache_max_ttl = 604800
cache_neg_min_ttl = 60
cache_neg_max_ttl = 600

[blocked_names]
blocked_names_file = '/etc/dnscrypt-proxy/blocklist.txt'

[sources]

	[sources.'public-resolvers']
	urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md', 'https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md']
	cache_file = '/var/cache/dnscrypt-proxy/public-resolvers.md'
	minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
	prefix = ''

	[sources.'relays']
	urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/relays.md', 'https://download.dnscrypt.info/resolvers-list/v3/relays.md']
	cache_file = '/var/cache/dnscrypt-proxy/relays.md'
	minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
	refresh_delay = 72
	prefix = ''

[broken_implementations]
fragments_blocked = ['cisco', 'cisco-ipv6', 'cisco-familyshield', 'cisco-familyshield-ipv6', 'cleanbrowsing-adult', 'cleanbrowsing-adult-ipv6', 'cleanbrowsing-family', 'cleanbrowsing-family-ipv6', 'cleanbrowsing-security', 'cleanbrowsing-security-ipv6']
